@Timur, thanks for sharing your thoughts here.

I wouldn't necessarily call it a "problem", maybe more of a constraint ;-)

I think as a developer the 1 hr is still okay, I mean how often do you want to have access to a running service from your local machine? But I agree with you, it's not the best approach.

A way better approach would be to use GCP's Identity Aware Proxy (IAP) offering to provide access to certain users or group of users without any expiration. :-)